18 - Laserfiche WebLink

Scope of Services for Preparation of tut CITY Oi AWIA-Compliance Documents legtleen City of Pleasanton pLEASANTON. West Yost will prepare a Cyber-RRA Summary that documents the findings and outcomes of Task 5. The Cyber-RRA work products will be integrated into the RRA Report. The Cyber-RRA work will be done in parallel with the other tasks and will begin alongside Task 4. It is estimated that Workshop 2B —Cyber-RRA will last 4 hours. Task 5 Deliverables: • Draft and Final Cybersecurity Technology Recommendations • Output from AVWVA Risk Management Tool Task 6. Analysis of Consequences, Vulnerability and Likelihood To complete the RRA, risk will be calculated for each threat-asset pair that is produced in Task 4. Task 6 consists of quantifying the three variables needed for the J100 risk calculation. The three parameters are: • The consequences of a threat or hazard to an asset, • The vulnerability of an asset to a threat or hazard, and • The likelihood of a threat or hazard occurring. The information produced in Task 6 will be used in Task 7 to calculate the baseline risk for each threat-asset pair. Task 6.1. Workshop 3— Consequences, Vulnerability, and Threat Likelihood The consequence analysis will be conducted in a workshop format. The West Yost team will conduct a half-day workshop(Workshop 3)to identify the worst reasonable consequences that can be caused by the threats on the assets from the list of threat-asset pairs developed in Task 4. During the workshop the group will: • Discuss worst reasonable case assumptions for each threat scenario including any local historical data pertaining to the consequences of hazard/threat occurrences. • Estimate the monetary consequences as outlined in the J100 Standard. WEST Y O S T ASSOCIATES 7 City of Pleasanton n\m\s\cityp\\2019 AWIA Scope and Budget November 2019